"Web Browser is unable to establish a secure connection to this web site"

Glorfindel · 01-21-2015, 10:42 AM

I can hardly load any sites anymore. most of google's search results show this error. Is there any way to fix it or is it a problem with SSL?

knc1 · 01-21-2015, 11:49 AM

Quote:

Originally Posted by Glorfindel

I can hardly load any sites anymore. most of google's search results show this error. Is there any way to fix it or is it a problem with SSL?

Web Browser cache of certificates has expired?

crich70 · 01-21-2015, 12:36 PM

I don't have any such problem. Whether through Chrome on my desktop or silk on my Kindle Fire the site comes up with no trouble.

hawhill · 01-21-2015, 12:54 PM

Though this thread is tagged "Kindle 4", so it's probably not about Chrome on the desktop or some browser on the Fires, I guess.

My bet would be on SSL certificate or mechanism trouble, too. Either the cert store is (too) outdated - which I can easily imagine - or it is about SSL/TLS (though the K4 is new enough to use TLS 1.0), or encryption (though here, too, I think the K4 should support AES - as opposed to 3DES and RC4 - and SHA256 - as opposed to MD5 and SHA1). OP, test here: https://www.ssllabs.com/ssltest/viewMyClient.html

arikfunke · 01-21-2015, 02:06 PM

I am experiencing the same problem on the K3. This has started about a year ago on a handful of websites and has been getting progressively worse. Now most websites are affected.

My first guess was outdated root certificates: I therefore updated `/etc/ssl/certs/ca-certificates.crt` with the certificates extracted from Firefox.

Unfortunately this has not made any difference that I can tell. Those websites that were working before, e.g. https://www.google.com, continue to work while those that did not, e.g. https://premium.zeit.de, are still showing the OP's message.

Any ideas from the Kindle hackers? I would love to get my trusty K3 working again.

Update 1:
Messing with `/etc/ssl/certs/ca-certificates.crt` was a bad idea: It prevents installation of FW 3.4.1 which is the correct solution to the above described HTTPS problem.

Before I forget: https://www.ssllabs.com/ssltest/viewMyClient.html does not load either...

Glorfindel · 01-21-2015, 02:58 PM

Quote:

Originally Posted by hawhill

Though this thread is tagged "Kindle 4", so it's probably not about Chrome on the desktop or some browser on the Fires, I guess.
My bet would be on SSL certificate or mechanism trouble, too. Either the cert store is (too) outdated - which I can easily imagine - or it is about SSL/TLS (though the K4 is new enough to use TLS 1.0), or encryption (though here, too, I think the K4 should support AES - as opposed to 3DES and RC4 - and SHA256 - as opposed to MD5 and SHA1). OP, test here: https://www.ssllabs.com/ssltest/viewMyClient.html

That site gives me the same error!

Glorfindel · 01-21-2015, 02:59 PM

Quote:

Originally Posted by knc1

Web Browser cache of certificates has expired?

Would rebooting fix that?

knc1 · 01-21-2015, 03:26 PM

Quote:

Originally Posted by Glorfindel

Would rebooting fix that?

Here is another source, other than ripping from a browser:
http://anonscm.debian.org/cgit/colla...rtificates.git

Glorfindel · 01-21-2015, 03:30 PM

Ok, so I put those in the same dir mentioned by arikfunke?

NiLuJe · 01-21-2015, 03:54 PM

Note that Amazon recently released FW 3.4.1 to fix that very thing on the K3. Which means they'll probably do so for the K4.

Glorfindel · 01-21-2015, 04:56 PM

It doesn't break the jb does it?

NiLuJe · 01-21-2015, 05:35 PM

3.4.1? Nope.

qlob · 01-21-2015, 05:36 PM

Hm. I haven't gotten 3.4.1 yet. is it OTA?

Glorfindel · 01-21-2015, 06:28 PM

Well, that will be nice if an update fixes it.

Glorfindel · 01-21-2015, 06:35 PM

There is a new update for the K4 I think, 4.1.2.
Edit: It fixed the problem!

01-21-2015, 10:42 AM	#1
Glorfindel Force-Aware Elf Posts: 4,757 Karma: 11557898 Join Date: Feb 2014 Location: Valinor Device: Kindle 4 w/SO	"Web Browser is unable to establish a secure connection to this web site" I can hardly load any sites anymore. most of google's search results show this error. Is there any way to fix it or is it a problem with SSL?

01-21-2015, 02:06 PM	#5
arikfunke Enthusiast Posts: 36 Karma: 41848 Join Date: Mar 2011 Device: iRex	I am experiencing the same problem on the K3. This has started about a year ago on a handful of websites and has been getting progressively worse. Now most websites are affected. My first guess was outdated root certificates: I therefore updated `/etc/ssl/certs/ca-certificates.crt` with the certificates extracted from Firefox. Unfortunately this has not made any difference that I can tell. Those websites that were working before, e.g. https://www.google.com, continue to work while those that did not, e.g. https://premium.zeit.de, are still showing the OP's message. Any ideas from the Kindle hackers? I would love to get my trusty K3 working again. Update 1: Messing with `/etc/ssl/certs/ca-certificates.crt` was a bad idea: It prevents installation of FW 3.4.1 which is the correct solution to the above described HTTPS problem. Before I forget: https://www.ssllabs.com/ssltest/viewMyClient.html does not load either... Last edited by arikfunke; 01-22-2015 at 10:07 AM.

01-21-2015, 06:35 PM	#15
Glorfindel Force-Aware Elf Posts: 4,757 Karma: 11557898 Join Date: Feb 2014 Location: Valinor Device: Kindle 4 w/SO	There is a new update for the K4 I think, 4.1.2. Edit: It fixed the problem! Last edited by Glorfindel; 01-21-2015 at 08:00 PM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Legal web site: "Please stop calling Amazon a monopoly"	fjtorres	General Discussions	44	10-19-2014 05:25 AM
Possible bug: "Aborted" rendering in Web Browser with text boxes	arspr	Kobo Reader	0	09-27-2014 08:21 AM
Is there any site that can shrink/split web pages for kindle's "basic web"? thanks	kocoman	Amazon Kindle	1	03-22-2013 06:01 PM
Barnes & Noble mulls Android SDK for Nook, says web browser "if readers want it"	sforce	News	15	10-22-2009 03:25 AM
Mobileread wins "Best Technology Web Site" award	Colin Dunstan	Announcements	3	01-04-2006 10:51 AM

01-21-2015, 12:36 PM	#3
crich70 Grand Sorcerer Posts: 11,305 Karma: 43993832 Join Date: Feb 2010 Location: Monroe Wisconsin Device: K3, Kindle Paperwhite, Calibre, and Mobipocket for Pc (netbook)	I don't have any such problem. Whether through Chrome on my desktop or silk on my Kindle Fire the site comes up with no trouble.

01-21-2015, 12:54 PM	#4
hawhill Wizard Posts: 1,379 Karma: 2155307 Join Date: Nov 2010 Location: Goettingen, Germany Device: Kindle Paperwhite, Kobo Mini	Though this thread is tagged "Kindle 4", so it's probably not about Chrome on the desktop or some browser on the Fires, I guess. My bet would be on SSL certificate or mechanism trouble, too. Either the cert store is (too) outdated - which I can easily imagine - or it is about SSL/TLS (though the K4 is new enough to use TLS 1.0), or encryption (though here, too, I think the K4 should support AES - as opposed to 3DES and RC4 - and SHA256 - as opposed to MD5 and SHA1). OP, test here: https://www.ssllabs.com/ssltest/viewMyClient.html

01-21-2015, 03:30 PM	#9
Glorfindel Force-Aware Elf Posts: 4,757 Karma: 11557898 Join Date: Feb 2014 Location: Valinor Device: Kindle 4 w/SO	Ok, so I put those in the same dir mentioned by arikfunke?

01-21-2015, 03:54 PM	#10
NiLuJe BLAM! Posts: 13,477 Karma: 26012494 Join Date: Jun 2010 Location: Paris, France Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E	Note that Amazon recently released FW 3.4.1 to fix that very thing on the K3. Which means they'll probably do so for the K4.

01-21-2015, 04:56 PM	#11
Glorfindel Force-Aware Elf Posts: 4,757 Karma: 11557898 Join Date: Feb 2014 Location: Valinor Device: Kindle 4 w/SO	It doesn't break the jb does it?

01-21-2015, 05:35 PM	#12
NiLuJe BLAM! Posts: 13,477 Karma: 26012494 Join Date: Jun 2010 Location: Paris, France Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E	3.4.1? Nope.

01-21-2015, 05:36 PM	#13
qlob Official Lurker Posts: 1,050 Karma: 7096675 Join Date: Apr 2012 Device: Kindle 3.4	Hm. I haven't gotten 3.4.1 yet. is it OTA?

01-21-2015, 06:28 PM	#14
Glorfindel Force-Aware Elf Posts: 4,757 Karma: 11557898 Join Date: Feb 2014 Location: Valinor Device: Kindle 4 w/SO	Well, that will be nice if an update fixes it.

Advert

Advert